Re: Deploying Software with Computer GPO Errors

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Cary Shultz [A.D. MVP] (cwshultz_at_mvps.org)
Date: 09/28/04 

Date: Mon, 27 Sep 2004 21:07:12 -0400

Good evening, Chris! I hope that you are dreaming of Active Directory ( and
not still working! ).

Nathan,

I am going to take a stab at this: Have you entered the path to the .msi
file as a mapped network drive? You need to use the UNC path! So, instead
of entering F:\applications\office2003\file.msi you would need to enter
\\servername\sharename\file.msi.

I would try this. Assuming that this is what you did, then I might work on
the Share and NTFS permissions. All you really need ( and this is simply a
matter of opinion ) is Administrators @ Full Control and Domain Computers @
Read. Now, if this is on a DC this will work just fine. If this is on a
File Server then I might use Domain Admins @ Full Control instead of
Administrators....

HTH,

Cary

"Chriss3 [MVP]" <noSpamHere@chrisse.se> wrote in message
news:OY$AodOpEHA.3464@tk2msftngp13.phx.gbl...
> Nathan I recommend you to try with Share Permission everyone full control
> and see what happens.
>
> --
> Regards
> Christoffer Andersson
> Microsoft MVP - Directory Services
>
> No email replies please - reply in the newsgroup
> ------------------------------------------------
> http://www.chrisse.se - Active Directory Tips
>
> "Nathan Truhan" <ntruhan@nospam.nospam> skrev i meddelandet
> news:B654C29B-D71E-4008-A357-D7778B731AD0@microsoft.com...
> > Chris,
> > Thank you for replying. Since your message, I have added the Domain
> > Computers to both the share and folder permissions as well as the
> > individual
> > computer accounts for the two PC's I am testing. Both still give the
> > Cannot
> > find installation source message. Strangely enough, one of the PC's is
> > returning the following error right before it starts to run the managed
> > software install:
> > Event Type: Warning
> > Event Source: EventSystem
> > Event Category: (52)
> > Event ID: 4356
> > Date: 9/27/2004
> > Time: 4:00:24 PM
> > User: N/A
> > Computer: REGSN75SH701
> > Description:
> > The COM+ Event System failed to create an instance of the subscriber
> >
partition:{41E90F3E-56C1-4633-81C3-6E8BAC8BDD70}!new:{6295DF2D-35EE-11D1-870
7-00C04FD93327}.
> > CoGetObject returned HRESULT 8000401A.
> >
> > For more information, see Help and Support Center at
> > http://go.microsoft.com/fwlink/events.asp.
> >
> > Also, on the PC that doesn't give that error, it seems to be creating
the
> > Microsoft Office Folder in the start menu with fake icons, but when you
> > click
> > on one I get a message along the line of that action is not valid. I do
> > have
> > the package set to advanced. Should that be changed to assigned? And
> > would
> > you have any more ideas?
> >
> > Thanks.
> >
> > "Chriss3 [MVP]" wrote:
> >
> >> Hello Nathan,
> >> When you deploy software within a GPO at the Computer Configuration
> >> Level,
> >> The package is about to be installed during computer startup, then the
> >> computer use it's own account to access the package on the network
share.
> >> You may change permission and grant Domain Computers group or some
thing
> >> that allows the client to use its computer account to access the
package.
> >> --
> >> Regards
> >> Christoffer Andersson
> >> Microsoft MVP - Directory Services
> >>
> >> No email replies please - reply in the newsgroup
> >> ------------------------------------------------
> >> http://www.chrisse.se - Active Directory Tips
> >>
> >> "Nathan Truhan" <ntruhan@nospam.nospam> skrev i meddelandet
> >> news:B2D55AF3-840D-4C70-92DE-59227A4AF32C@microsoft.com...
> >> > Hello,
> >> > Sorry for the long post but I need to explain this I think.
> >> > In our office we have been trying to experiment with deploying
software
> >> > via
> >> > Group Policies in the Computer Policy. We have tried using
WinInstall
> >> > to
> >> > create MSI packages and we thought we did something wrong, but we
just
> >> > tried
> >> > to deploy office 2003 pro. We created a MST, set it up via a
computer
> >> > policy, set the permissions on the share with Administrators having
> >> > full
> >> > control, everyone and SYSTEM having read only, and Domain Computers
> >> > with
> >> > Change/Read. inside that share is the Office 2003 folder,
permissions:
> >> > Adminstrators - Full, CREATOR OWNER - Full, SYSTEM - Full, and
Users -
> >> > Read/Execute. Setup the Software Installation default location to
the
> >> > share,
> >> > created a package for Office with MST. When PC in the test OU boots,
> >> > it
> >> > says
> >> > installing managed software Office 2003 Professional, however it only
> >> > tries
> >> > for about a minute and gives an error:
> >> > Event Type: Error
> >> > Event Source: Application Management
> >> > Event Category: None
> >> > Event ID: 102
> >> > Date: 9/24/2004
> >> > Time: 5:07:22 PM
> >> > User: NT AUTHORITY\SYSTEM
> >> > Computer: MCRAIG2
> >> > Description:
> >> > The install of application Microsoft Office Professional Edition 2003
> >> > from
> >> > policy Office 2003 Admin Install failed. The error was : The
> >> > installation
> >> > source for this product is not available. Verify that the source
> >> > exists
> >> > and
> >> > that you can access it.
> >> >
> >> > For more information, see Help and Support Center at
> >> > http://go.microsoft.com/fwlink/events.asp.
> >> >
> >> >
> >> > Now If I do the samer thing via a User Install it seems to work fine.
> >> > Does anyone know what I am doing wrong? I figure it might be
> >> > permissions,
> >> > but I am not sure.
> >> >
> >> > Thank you,
> >> > Nathan
> >>
> >>
> >>
>
>

Relevant Pages

  • HELP!!! Group Permissions
    ... accounts (within 2003 Active Directory) and add computers to the domain. ... What are the minimal set of permissions that I should grant this group? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Cant assign calendar permissions to a group
    ... to be able to use a security group so that I can manage membership of ... By testing I have verified that a resource calendar's permissions can ... integral concept within Active Directory. ... Only individual users can be granted membership. ...
    (microsoft.public.exchange.admin)
  • Re: Unable to delete orphaned 1.5 GB System Restore folder
    ... The only computers i fix are my own. ... If so you may want to leave this folder alone. ... it includes all subdirectories with inherited permissions. ... try deleting from the command line using system by using the AT ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Can a lone computer have Access db problems?
    ... Sorry about the loose use of the term 'edit'. ... nor was his permissions changed). ... certain computers to misbehave). ... When you say he is "authorized", that sounds as if the database is ...
    (comp.databases.ms-access)
  • Re: Custom rights
    ... Try giving user who is adding account View Only Exchange Administrator ... >> To add computers to the domain go to AD Users and Computers. ... you will have to manually configure permissions on that user object ... >>> Look into AD delegation, though you may need to do some custom ...
    (microsoft.public.win2000.security)